A vulnerability was found in module-from-string 3.3.1 and classified as problematic. This issue affects the function
lib.requireFromString
. The manipulation leads to improperly controlled modification of object prototype attributes (‘prototype pollution’).
The identification of this vulnerability is CVE-2024-57072. The attack can only be done within the local network. There is no exploit available.